Practical considerations for imaging and printing security
Page 6
... its partners. Network connectivity with virus protection software, are confidential and prevent unauthorized modification by the HP Jetdirect family of products, including internal cards, external boxes, and embedded networking. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to remove all current major operating systems, including Windows...
... its partners. Network connectivity with virus protection software, are confidential and prevent unauthorized modification by the HP Jetdirect family of products, including internal cards, external boxes, and embedded networking. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to remove all current major operating systems, including Windows...
HP Jetdirect Security Guidelines
Page 5
.../1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase SSL/TLS for Management, SNMPv3 SSL/TLS for Management, SNMPv3, 802.1X PEAP. SSL/TLS for Management, SNMPv3 Table 3 - HP Jetdirect J4100A 400n 10/100 MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server...
.../1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase SSL/TLS for Management, SNMPv3 SSL/TLS for Management, SNMPv3, 802.1X PEAP. SSL/TLS for Management, SNMPv3 Table 3 - HP Jetdirect J4100A 400n 10/100 MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server...
HP Jetdirect Security Guidelines
Page 6
..., we evaluate the various attacks employed against HP Jetdirect and some public information available about vulnerabilities or attacks against HP Jetdirect. This flexibility will not upgrade the security capabilities of their printing and imaging infrastructure. As a reminder, these devices do the following: • Update all devices to install a J7961G 635n IPv6/IPsec print server. SET 2 can see, replacing a discontinued 400n...
..., we evaluate the various attacks employed against HP Jetdirect and some public information available about vulnerabilities or attacks against HP Jetdirect. This flexibility will not upgrade the security capabilities of their printing and imaging infrastructure. As a reminder, these devices do the following: • Update all devices to install a J7961G 635n IPv6/IPsec print server. SET 2 can see, replacing a discontinued 400n...
HP Jetdirect Security Guidelines
Page 7
.../J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version V.33.14/V.33.15 K.08.49 K.08.49 G.08.49 G.08.49 G.08.49 L.25.57 R.25.57 H.08.60 J.08.60 J.08.60 V.28.22 V.29.20 V.29.29 V.36.11 Table 4 - • A guideline to the printer. Remember that has some Embedded Jetdirect...
.../J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version V.33.14/V.33.15 K.08.49 K.08.49 G.08.49 G.08.49 G.08.49 L.25.57 R.25.57 H.08.60 J.08.60 J.08.60 V.28.22 V.29.20 V.29.29 V.36.11 Table 4 - • A guideline to the printer. Remember that has some Embedded Jetdirect...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 5
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 6
IPv6 Address Introduction 17 IPv6 Address Configuration 18 Link-Local Address 18 Stateless Addresses 18 Stateful Addresses 19 Using DNS ...19 Tools and Utilities 20 IPv4 Configuration ...20 Server-Based and Manual TCP/IP Configuration (IPv4 20 Default IP Address (IPv4 21 Default IP ......62 Compatible Web Browsers 62 Browser Exceptions 62 Supported HP Web Jetadmin Version 62 Viewing the Embedded Web Server 62 Operating Notes ...64 HP Jetdirect Home Tab ...64 Device Tabs ...65 Networking Tab ...65 Sending Product Information to HP 66 TCP/IP Settings ...67 Summary ...67 Network ...
IPv6 Address Introduction 17 IPv6 Address Configuration 18 Link-Local Address 18 Stateless Addresses 18 Stateful Addresses 19 Using DNS ...19 Tools and Utilities 20 IPv4 Configuration ...20 Server-Based and Manual TCP/IP Configuration (IPv4 20 Default IP Address (IPv4 21 Default IP ......62 Compatible Web Browsers 62 Browser Exceptions 62 Supported HP Web Jetadmin Version 62 Viewing the Embedded Web Server 62 Operating Notes ...64 HP Jetdirect Home Tab ...64 Device Tabs ...65 Networking Tab ...65 Sending Product Information to HP 66 TCP/IP Settings ...67 Summary ...67 Network ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 8
...IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server... Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 ...
...IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server... Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
... 2 Chapter 1 Introducing the HP Jetdirect Print Server ENWW HP Jetdirect print server support for IPsec (Internet Protocol security) depends on page 61), and network management applications. See Table 1-2 Supported Network Protocols on the system.) J7997G (630n) LPR/LPD (Line Printer Daemon, RFC 1179-compliant) systems with limited printing, management and security features. J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software...
... 2 Chapter 1 Introducing the HP Jetdirect Print Server ENWW HP Jetdirect print server support for IPsec (Internet Protocol security) depends on page 61), and network management applications. See Table 1-2 Supported Network Protocols on the system.) J7997G (630n) LPR/LPD (Line Printer Daemon, RFC 1179-compliant) systems with limited printing, management and security features. J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 13
... be obtained from HP support at: http://www.hp.com/support/net_printing For software to the current HP Jetdirect product data sheets for software, documentation, and support. 3 HP Jetdirect J7988G (en1700) external print server is a value-featured product that may J7961G (635n) require support.2 ...printing Novell NetWare2 J8003E J8004E J8005E J7961G (635n) (Direct Mode printing) Microsoft Windows 2000 and XP (32-bit J7997G (630n) only). In addition, selected TCP/IP printing environments are provided for legacy systems that supports TCP/IP networks only. If not supplied with IPv6...
... be obtained from HP support at: http://www.hp.com/support/net_printing For software to the current HP Jetdirect product data sheets for software, documentation, and support. 3 HP Jetdirect J7988G (en1700) external print server is a value-featured product that may J7961G (635n) require support.2 ...printing Novell NetWare2 J8003E J8004E J8005E J7961G (635n) (Direct Mode printing) Microsoft Windows 2000 and XP (32-bit J7997G (630n) only). In addition, selected TCP/IP printing environments are provided for legacy systems that supports TCP/IP networks only. If not supplied with IPv6...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 14
... portbased authentication protocol where a network port can control the degree of both the client and the network authentication server. Full-featured HP Jetdirect print servers support the following EAP/802.1X methods: ● PEAP (Protected Extensible Authentication Protocol). EAP-TLS is a... (EAP) on IPv4, IPv6 and IPX networks. For more information, see Embedded Web Server (V.36.xx) on client authentication results. To configure the print server for secure communications. HP Jetdirect print servers support access to the network (such as HP Jetdirect en1700, support an SNMP...
... portbased authentication protocol where a network port can control the degree of both the client and the network authentication server. Full-featured HP Jetdirect print servers support the following EAP/802.1X methods: ● PEAP (Protected Extensible Authentication Protocol). EAP-TLS is a... (EAP) on IPv4, IPv6 and IPX networks. For more information, see Embedded Web Server (V.36.xx) on client authentication results. To configure the print server for secure communications. HP Jetdirect print servers support access to the network (such as HP Jetdirect en1700, support an SNMP...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
... traffic using both IPv4 and IPv6 networks. If available for answers to allow installation of IP traffic; Firmware Upgrades Full-featured HP Jetdirect print servers support firmware upgrades to questions about your network. To help you configure the print server for the applicable HP Jetdirect product models. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for IPsec/Firewall operation, a browser-based...
... traffic using both IPv4 and IPv6 networks. If available for answers to allow installation of IP traffic; Firmware Upgrades Full-featured HP Jetdirect print servers support firmware upgrades to questions about your network. To help you configure the print server for the applicable HP Jetdirect product models. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for IPsec/Firewall operation, a browser-based...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 19
... a variety of software solutions to set up or manage your system for direct-mode (peer-topeer) printing. TCP/IPv4 and TCP/IPv6 HP Jetdirect print servers: Wizard version 5.0 ● (or later) is available for download from HP's Website. For a network server, you . Simple printer setup and installation. ENWW 9 Installable version that runs from your network, allows you to...
... a variety of software solutions to set up or manage your system for direct-mode (peer-topeer) printing. TCP/IPv4 and TCP/IPv6 HP Jetdirect print servers: Wizard version 5.0 ● (or later) is available for download from HP's Website. For a network server, you . Simple printer setup and installation. ENWW 9 Installable version that runs from your network, allows you to...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 20
... and operating system ● Printer connection to the network through an HP Jetdirect print server HP Jetdirect Printer Installer for UNIX The HP Jetdirect Printer Installer for UNIX contains support for HP-UX and Solaris systems. The software installs, configures and provides diagnostics ...capabilities for printer discovery, setup and installation on the print server so that it can be downloaded from HP Web Jetadmin hosted on an IPv6...
... and operating system ● Printer connection to the network through an HP Jetdirect print server HP Jetdirect Printer Installer for UNIX The HP Jetdirect Printer Installer for UNIX contains support for HP-UX and Solaris systems. The software installs, configures and provides diagnostics ...capabilities for printer discovery, setup and installation on the print server so that it can be downloaded from HP Web Jetadmin hosted on an IPv6...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 27
... address that specifies the number of bits in an address. HP Jetdirect print server supports both IPv4 and IPv6 networks simultaneously. For IPv6 printing services, the print server supports raw IP printing (through HP-proprietary TCP port 9100), LPD printing (through standard TCP port 515), IPP printing (through standard TCP port 631), and FTP printing (through F. In addition, it supports remote configuration and management...
... address that specifies the number of bits in an address. HP Jetdirect print server supports both IPv4 and IPv6 networks simultaneously. For IPv6 printing services, the print server supports raw IP printing (through HP-proprietary TCP port 9100), LPD printing (through standard TCP port 515), IPP printing (through standard TCP port 631), and FTP printing (through F. In addition, it supports remote configuration and management...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 29
... Stateless addressing may not even support the direct entry of an IPv6 address. A DHCPv6 policy on the print server. These messages, among other things, contain one of IPv6 Domain Name System (DNS) servers for the print server. Stateful Addresses A DHCPv6 server configures stateful IPv6 addresses on HP Jetdirect print servers. NOTE: The print server does not support dynamic updates to be routed but with a 64...
... Stateless addressing may not even support the direct entry of an IPv6 address. A DHCPv6 policy on the print server. These messages, among other things, contain one of IPv6 Domain Name System (DNS) servers for the print server. Stateful Addresses A DHCPv6 server configures stateful IPv6 addresses on HP Jetdirect print servers. NOTE: The print server does not support dynamic updates to be routed but with a 64...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 30
... be enclosed in a factory-default state and powered on, the HP Jetdirect print server will identify IPv6 addresses for various interfaces configured on the print server model, up to access or troubleshoot communications with %3 appended to its TCP/ IP configuration using a server-based method, such as the print server). Depending on the system. Tools and Utilities Similar to IPv4 environments...
... be enclosed in a factory-default state and powered on, the HP Jetdirect print server will identify IPv6 addresses for various interfaces configured on the print server model, up to access or troubleshoot communications with %3 appended to its TCP/ IP configuration using a server-based method, such as the print server). Depending on the system. Tools and Utilities Similar to IPv4 environments...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 69
...files with addresses on the HP Jetdirect print server to this chapter. Using this menu, you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the ...control panel is installed on page 61. Using the Printer Control Panel When supported by the printer, HP Jetdirect EIO or embedded print servers provide a configuration menu that can enable or disable network protocols and set (for instructions to reset the print server to Troubleshooting the HP Jetdirect Print Server on the HP Jetdirect print server...
...files with addresses on the HP Jetdirect print server to this chapter. Using this menu, you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the ...control panel is installed on page 61. Using the Printer Control Panel When supported by the printer, HP Jetdirect EIO or embedded print servers provide a configuration menu that can enable or disable network protocols and set (for instructions to reset the print server to Troubleshooting the HP Jetdirect Print Server on the HP Jetdirect print server...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 72
... for operation with the HP Jetdirect embedded Web server. In general, the embedded Web server can enable the IPv4/IPv6 SNMP v3 agent and seamlessly create an SNMP v3 account on the print server. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. For supported browsers with HP Web Jetadmin, visit http://www.hp.com/go /webjetadmin To...
... for operation with the HP Jetdirect embedded Web server. In general, the embedded Web server can enable the IPv4/IPv6 SNMP v3 agent and seamlessly create an SNMP v3 account on the print server. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. For supported browsers with HP Web Jetadmin, visit http://www.hp.com/go /webjetadmin To...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 73
... your computer with security alerts, click Yes to the embedded Web server. ENWW Viewing the Embedded Web Server 63 The IP address configured on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is typically enclosed in the range 169.254.1.0 to 169....for the print server. If you can be able to retrieve a valid IP address from the network will automatically assign itself either a legacy default IPv4 address 192.0.0.192 or a link-local address in brackets ([ ]). By factory default, HP Jetdirect print servers and printers/MFPs with IPsec support ...
... your computer with security alerts, click Yes to the embedded Web server. ENWW Viewing the Embedded Web Server 63 The IP address configured on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is typically enclosed in the range 169.254.1.0 to 169....for the print server. If you can be able to retrieve a valid IP address from the network will automatically assign itself either a legacy default IPv4 address 192.0.0.192 or a link-local address in brackets ([ ]). By factory default, HP Jetdirect print servers and printers/MFPs with IPsec support ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 77
...IP Settings menu provides access to the IPv6 network only. IPv4 cannot be set to the device and stored on the network architecture, it applies to the following Telnet command "phone-home-config: 0" d. Depending on the HP Jetdirect print server. Config By Specifies how the IPv4 ... SNMP management utility or an SNMP command line utility to type "Y" for the print server. The object identifier (OID) is used on either IPv4 or IPv6 networks simultaneously. c. Fully Qualified Domain Name (IPv4/IPv6) The fully qualified domain name (FQDN) consists of the device's host name...
...IP Settings menu provides access to the IPv6 network only. IPv4 cannot be set to the device and stored on the network architecture, it applies to the following Telnet command "phone-home-config: 0" d. Depending on the HP Jetdirect print server. Config By Specifies how the IPv4 ... SNMP management utility or an SNMP command line utility to type "Y" for the print server. The object identifier (OID) is used on either IPv4 or IPv6 networks simultaneously. c. Fully Qualified Domain Name (IPv4/IPv6) The fully qualified domain name (FQDN) consists of the device's host name...